9 Commits

Author	SHA1	Message	Date
Martin Basti	f24f614396	Server Upgrade: specify order of plugins in update files ... * add 'plugin' directive * specify plugins order in update files * remove 'run plugins' options * use ldapupdater API instance in plugins * add update files representing former PreUpdate and PostUpdate order of plugins https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: David Kupka <dkupka@redhat.com>	2015-04-14 19:25:47 +02:00
Martin Basti	cc19b5a76a	Server Upgrade: Apply plugin updates immediately ... Preparation to moving plugins executin into update files. * remove apply_now flag * plugins will return only (restart, modifications) https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: David Kupka <dkupka@redhat.com>	2015-04-14 19:25:47 +02:00
Jan Cholasta	fa50068607	upload_cacrt: Fix empty cACertificate in cn=CAcert ... https://fedorahosted.org/freeipa/ticket/4565 Reviewed-By: David Kupka <dkupka@redhat.com>	2015-03-19 14:38:34 +00:00
Martin Basti	0c7274ead8	Server Upgrade: Update entries in order specified in file ... Dictionary replaced with list. Particular upgrades are executed in the same order as they are specified in update a file. Different updates for the smae cn, are not merged into one upgrade https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: David Kupka <dkupka@redhat.com>	2015-03-19 12:37:09 +01:00
Jan Cholasta	608851d3f8	Check LDAP instead of local configuration to see if IPA CA is enabled ... The check is done using a new hidden command ca_is_enabled. https://fedorahosted.org/freeipa/ticket/4621 Reviewed-By: David Kupka <dkupka@redhat.com>	2014-10-17 12:53:11 +02:00
Jan Cholasta	5f29a71bd7	Upload CA chain from DS NSS database to certificate store on server update. ... Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com>	2014-07-30 16:04:21 +02:00
Jan Cholasta	97c1c95f20	Convert remaining update code to LDAPEntry API.	2014-01-24 20:29:31 +01:00
Rob Crittenden	f6f8307be2	Don't base64-encode the CA cert when uploading it during an upgrade. ... We want to store the raw value. Tools like ldapsearch will automatically base64 encode the value because it's binary so we don't want to duplicate that. https://fedorahosted.org/freeipa/ticket/3477	2013-03-07 09:40:07 +01:00
Alexander Bokovoy	a40285c5a0	Update plugin to upload CA certificate to LDAP ... Define post-update plugin to upload public CA certificate to IPA LDAP server. The plugin includes also update file that creates default container for the certificate.	2013-01-23 14:26:41 -05:00